Selinux and awstats

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Claude Jones wrote:
> On Wednesday 09 July 2008 09:52:13 Daniel J Walsh wrote:
>> Claude Jones wrote:
>> | On Tue July 8 2008, Daniel J Walsh wrote:
>> |> Is matchpathcon still giving you the error?
>> |>
>> |> # cat
>> |> /etc/selinux/targeted/contexts/files/file_contexts.local #
>> |> cat
>> |> /etc/selinux/targeted/modules/active/file_contexts.local
>>
>> And did you execute the cat lines above?
> 
> Just did:
> # cat /etc/selinux/targeted/contexts/files/file_contexts.local
> # This file is auto-generated by libsemanage
> # Do not edit directly.
> 
>         /usr/lib(64)?/ati-fglrx/.*\.so(\..*)? -- 
> system_u:object_r:textrel_shlib_t:s0
> /usr/share/awstats/wwwroot/cgi-bin(/.*)?    
> system_u:object_r:httpd_sys_script_exec_t:s0
> [root at vrproductions3 ~]# cat 
> /etc/selinux/targeted/modules/active/file_contexts.local
> # This file is auto-generated by libsemanage
> # Do not edit directly.
> 
>         /usr/lib(64)?/ati-fglrx/.*\.so(\..*)? -- 
> system_u:object_r:textrel_shlib_t:s0
> 
> *********************************************************
> I'm afraid I don't understand...does any of this make sense to 
> you? Just had to reboot and I got about a dozen lines of this 
> stuff; it seems to happen when loading certain services...not 
> all. 
> 
> 
Execute

# semodule -B

And check if the contents of the two .local files match.

/etc/selinux/targeted/files/file_context

is the directory that matchpathcon and other utilities that read the
default file context use

/etc/selinux/targeted/modules/active is the files that semanage uses to
generate the /etc/selinux/targetd/files files.  So I am not sure how
they have gotten different.  Running semanage or semodule should replace
the /etc/selinux/targeted/files/file_contexts.local with
/etc/selinux/targeted/modules/active/files_contexts.local

If this does not work, you can copy it your self.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkh2A/AACgkQrlYvE4MpobPwXQCdHPueuKL2jFMwm1kiKKQAxjCH
OAUAoNLZRmSlAT7L5eShFxMm6rOUnrSZ
=T+KF
-----END PGP SIGNATURE-----